Amendments to the Claims 
I . (Currently Amended) A method, comprising: 

receiving a request for hardware component information at a service processor disposed 
in a hardware component as an open session request from a requesting client 
application; 

transmitting from the service processor a challenge string to the requesting client 

application, the challenge string including a session identification assigned by the 
service processor, wherein the session identification is unique to each session; 

receiving at the service processor a challenge response from the requesting client 

application, the challenge response including the session identification and a first 
hash number that is a function of at least one of the challenge string, the session 
identification, a sequence number, and a password ; 

comparing the challenge response to an expected response to the challenge string, 

wherein the comparing includes verifying the session identification received in 
the challenge response against the session identification transmitted in the 
challenge string; and 

transmitting the hardware component information to the requesting client application ; and 
receiving at the service processor a direct platform control (DPC) message from the client 

application, the DPC message including a second hash number to verify the 

integrity of the DPC message . 
Claims 2-3 (Cancelled) 
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4. (Currently Amended) The method according to of claim 1, wherein the challenge response 
includes a- the sequence numbertha K wherein the sequence number increments with 
every new message. 

5. (Cancelled) 

6. (Currently Amended) The method according to of claim 1, further comprising examining 
e ach pack e t the DPC message received from the client application for one or more of the 
following: the session identification, the sequence number, and a the second hash number. 

7. (Currently Amended) The method according to of claim 6, wherein the second hash 
number compris e s ig_a function of at least one of a body of the DPC message, e ne-er 
mor e of th e following: the session identification, the sequence number, and a pack e t the 
password . 

8. (Currently Amended) A method, comprising: 

transmitting a request for hardware component information to a service processor 

disposed in a hardware component as an open session request from a requesting 
client application; 

receiving from the service processor a challenge string at the requesting client 

application, the challenge string including a session identification assigned by the 
service processor, wherein the session identification is unique to each session; 

transmitting to the service processor a challenge response from the requesting client 

application, the challenge response including the session identification and a first 
hash number that is a function of at least one of the challenge string, the session 
identification, a sequence number, and a password ; and 
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receiving from the service processor an authentication response to the requesting client 
application based on a comparison of the challenge response from the requesting 
client application and an expected challenge response calculated in the service 
processor, wherein the comparison includes verifying the session identification in 
the challenge response transmitted to the service processor against the session 
identification received in the challenge strin g; and 

receiving at the service processor a direct platform control (DPC) message from the client 
application, the DPC message including a second hash number to verify the 
integrity of the DPC message . 
Claims 9-11 (Cancelled) 

12. (Currently Amended) The method according to of claim 8, furth e r comprising 
transmitting with e ach pack e t s e nt by th e cli e nt application on e or mor e of th e following: 
the session id e ntification, th e s e qu e nc e numb e r and a hash numb e r, wherein the second 
hash number includ e s i g_a function of at least one of a body of the DPC message, e ne-ef 
mor e of th e following: the session identification, the sequence number, and a pack e t the 
password . 

13. (Currently Amended) An apparatus, comprising: 
a remote access port; and 

a service processor coupled to the remote access port, wherein the service processor 

including a machine-readable medium, having stored thereon a set of instructions 
which, when executed, cause the service processor to: 

in response to a remote request for information about a component received as an 
open session request through the remote access port external to a host 
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operating system of the apparatus, transmit a challenge string to a 
requesting client application, the challenge string including session 
identification assigned by the service processor, wherein the session 
identification is unique to each session; 

compare a challenge response received from the requesting client application with 
an expected response, the challenge response including the session 
identification^ and a first hash number that is a function of at least one of 
the challenge string, the session identification, a sequence number, and a 
password, wherein the comparing includes verifying the session 
identification received in the challenge response against the session 
identification transmitted in the challenge string; and 

transmit an authentication response to the requesting client application based on 
the comparison ; and 

receiving at the service processor a direct platform control (DPC) message from 
the client application, the DPC message including a second hash number 
to verifV the integrity of the DPC message . 
Claims 14-15 (Cancelled) 

16. (Currently Amended) The apparatus according to of claim 13, wherein the service 
processor compares a-the sequence number included in the challenge response against 
previously received sequence numbers and ignores the challenge response if it does not 
include a sequence number in correct sequence. 

17. (Currently Amended) The apparatus according to of claim 13, wherein the service 
processor compares a the first hash number received in the challenge response with an 
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expected hash calculated by the service processor and transmits a success or failure 
message depending upon a result of the comparison. 
Claims 18-19 (Cancelled) 

20. (Currently Amended) A system, comprising: 
a processor; 
a memory; and 

a client application stored on a machine-readable medium, the client application 

including a set of instructions which, when executed, cause the client application 
to: 

transmit a request for hardware component information to a service processor 
disposed in a hardware component as an open session request; 

receive from the service processor a challenge string at the requesting client 

application, the challenge string including a session identification assigned 
by the service processor, wherein the session identification is unique to 
each session; 

transmit to the service processor a challenge response from the requesting client 
application, the challenge response including the session identification and 
a first hash number that is a function of at least one of the challenge string, 
the session identification, a sequence number, and a password ; md 

receive from the service processor an authentication response to the requesting 
client application based on a comparison of the challenge response from 
the requesting client application and an expected challenge response 
calculated at the service processor, wherein the comparison includes 
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verifying the session identification received in the challenge response 
against the session identification in the challenge strin g; and 
receiving at the service processor a direct platform control (DPC) message from 
the client application, the DPC message including a second hash number 
to verify the integrity of the DPC message . 

21-30 (Canceled) 

3 1 . (Currently Amended) A machine-readable medium having stored thereon data 

representing a -set sets of instructions which, when executed by a machine, causes the 
machine to: 

receive a request for hardware component information to a service processor disposed in 
a hardware component as an open session request; 

transmit from the service processor a challenge string at the requesting client application, 
the challenge string including a session identification assigned by the service 
processor, wherein the session identification is unique to each session; 

receive at the service processor a challenge response from the requesting client 

application, the challenge response including the session identification and a first 
hash number that is a function of at least one of the challenge string, the session 
identification, a sequence number, and a password ; 

compare the challenge response to an expected response to the challenge string, wherein 
the comparing includes verifying the session identification received in the 
challenge response against the session identification transmitted in the challenge 
string; and 

transmit the hardware component information to the requesting client application ; and 
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receiving at the service processor a direct platform control (DPC) message from the client 
a pplication, the DPC message including a second hash number to verify the 
integrity of the DPC message . 
Claims 32-33 (Cancelled) 

34. (Currently Amended) The system according to of claim 20, wherein the service processor 
compares a -the sequence number included in the challenge response against previously 
received sequence numbers and ignores the challenge response if it does not include a 
sequence number in correct sequence. 

35. (Currently Amended) The system according to of claim 20, wherein the service processor 
compares a first hash number received in the challenge response with an expected hash 
calculated by the service processor and transmits a success or failure message depending 
upon a result of the comparison. 

36. (Currently Amended) The machine-readable medium according to of claim 3 1 , wherein 
the sequence number included in the challenge response includes a s e qu e nc e numb e r that 
increments with every new message. 

37. (Currently Amended) The machine-readable medium according to of claim 31, wherein 
the set of instructions which, when executed by the machine, further causes the machine 
to examine each packet received from the client application for one or more of the 
following; the session identification, the sequence number, and athe first hash number. 

38. (New) The method of claim 12, wherein the sequence number increments with every 
new message. 
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